Microsoft Windows畸形IGMPv3报文远程拒绝服务漏洞（MS06-007）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议栈在处理IGMPv3报文时存在问题，远程攻击者可以利用此漏洞对主机执行远程拒绝服务攻击。 Microsoft Windows在实现TCP/IP时没能正确的处理特制的IGMP报文，未经认证的远程攻击者可以通过向有漏洞系统发送特制的IGMP报文导致系统失去响应。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Serve...

Microsoft Windows TCP/IP协议驱动远程溢出漏洞（MS06-032）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议驱动处理特定畸形的IP源路由报文时存在缓冲区溢出漏洞，远程攻击者可以通过发送有Loose Source and Record Route选项的特制ICMP报文触发这个漏洞，导致tcpip.sys或ntoskrnl.exe中出现错误而造成拒绝服务或执行任意指令。 默认情况下，Windows系统的路由及远程访问服务是关闭的，也就是说默认情况下系统不受此漏洞影响。 Microsoft Windows XP SP2 Microsoft Windows XP SP1...

Microsoft Windows RASMAN服务栈溢出漏洞（MS06-025）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows远程访问连接管理器RASMAN存在可远程调用的RPC接口，其中RPC接口 RasRpcSubmitRequest存在若干安全漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 函数RasRpcSubmitRequest及其子函数对作为参数的函数指针的有效性检查不足；某些子函数对参数的处理存在缓冲区溢出漏洞；这些漏洞都可能被攻击者利用在服务器上执行任意指令，从而控制系统。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microso...

Microsoft IPv6 TCP/IP Loopback LAND攻击拒绝服务(MS05-019/MS06-064)

Microsoft Windows是微软发布的非常流行的操作系统。 关闭了Windows防火墙的Windows Server 2003和XP SP2受LAND攻击的影响。攻击者可以发送设置了SYN标记的TCP报文，将源IP地址和目标IP地址及源端口和目标端口都设置为目标机器，导致15-30秒的DoS情况。 向文件服务器发送单个LAND报文就可能导致当前连接到服务器上所有工作站的Windows explorer僵死，服务器的CPU使用率达到100%。有时有漏洞服务器上的网络监控甚至无法嗅探的出恶意的报文。使用tcpreplay重现攻击可以导致网络完全瘫痪。 Microsoft Window...

Microsoft Windows TCP/IP协议栈ICMP重置TCP连接漏洞(MS05-19/MS06-064)

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议栈的ICMP协议处理模块存在漏洞，远程攻击者可能利用此漏洞重置服务器的TCP连接。 Microsoft Windows的ICMP协议处理模块没有充分检查某些类型ICMP消息的合法性，远程攻击者可以向受影响的服务器发送特制的ICMP消息导致服务器和客户端之间的已有TCP连接被重置。 Microsoft Windows 2000 SP4 Microsoft Windows 2000 SP3 Microsoft Windows XP SP2 Microsoft Windows...

Linux Kernel 2.2 (TCP/IP Weakness) Exploit

No description provided by source. / Exploit for the 2.2 linux-kernel TCP/IP weakness. C 1999 by S. Krahmer. THERE IS ABSOLUTELY NO WARRANTY. YOU USE IT AT YOUR OWN RSIK! THIS PROGRAM IS LICESED UNDER THE GPL and belongs to a security- advisory of team teso. You should get the full advisory with...

linux/x86 HTTP/1.x GET, Downloads and execve() 111 bytes+

Exploit for linux/x86 platform in category shellcode ========================================================= linux/x86 HTTP/1.x GET, Downloads and execve 111 bytes+ ========================================================= / linux/x86 - HTTP/1.x GET, Downloads and execve - 111 bytes+ This...

HP-UX PHNE_30161 : HP-UX running TCP/IP Remote Denial of Service (DoS) (HPSBUX02087 SSRT4728 rev.5)

s700800 11.00 Cumulative STREAMS Patch : A potential security vulnerability has been identified with HP-UX running TCP/IP. The potential vulnerability could be exploited remotely to cause a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

CVE-2006-5290

The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."...

CVE-2006-5290

CVE-2006-5290 affects Xerox WorkCentre and WorkCentre Pro devices (232, 238, 245, 255, 265, 275) where the ESS/Network Controller and MicroServer Web Server components are vulnerable. The issue is a WebUI command injection on the TCP/IP hostname that allows remote attackers to bypass authenticati...

[security bulletin] HPSBUX02087 SSRT4728 rev.4 - HP-UX running TCP/IP Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00579189 Version: 4 HPSBUX02087 SSRT4728 rev.4 - HP-UX running TCP/IP Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

HP-UX TCP/IP DoS

No description provided...

Microsoft Security Bulletin MS06-064 Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service (922819)

Microsoft Security Bulletin MS06-064 Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service 922819 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows. Impact of Vulnerability: Denial of Service Maximum Severity Rating: Low...

MS06-064: Vulnerability in TCP/IP IPv6 Could Allow Denial of Service (922819)

The remote host runs a version of Windows that has a flaw in its TCP/IP IPv6 stack. The flaw could allow an attacker to perform a denial of service attack against the remote host. To exploit this vulnerability, an attacker needs to send a specially crafted ICMP or TCP packet to the remote host. C...

Protect Yourself against Multiple Remote Desktop Protocol (RDP) Vulnerabilities

The Remote Desktop Protocol RDP lets users create a virtual session on their desktop computers, allowing remote users to access all the data and applications on their computers. As you interact with the client system, keystrokes and mouse events are sent over the connection to the remote system,...

CVE-2006-4430

The Cisco Network Admission Control NAC 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access CCA Agent and bypass local and remote protection mechanisms by modifying 1 the HTTP User-Agent header or 2 the behavior of the TCP/IP stack. NOTE: the vendor has...

CVE-2006-4117

The squeuedrain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service "bad trap" and system panic by opening and closing a large number of TCP connections "heavy TCP/IP loads". NOTE: the original report specifies the function na...

HP-UX PHNE_34131 : HP-UX running TCP/IP Remote Denial of Service (DoS) (HPSBUX02087 SSRT4728 rev.5)

s700800 11.11 Cumulative STREAMS Patch : A potential security vulnerability has been identified with HP-UX running TCP/IP. The potential vulnerability could be exploited remotely to cause a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

Code injection

Tamarack MMSd before 7.992 allows remote attackers to cause a denial of service crash via malformed RFC1006 OSI over TCP/IP packets...

CVE-2006-1178

The vulnerability CVE-2006-1178 affects Tamarack MMSd prior to version 7.992, where the product fails to properly handle malformed RFC1006 (OSI over TCP/IP) packets. This can allow a remote, unauthenticated attacker to cause a denial of service (crash) on affected devices. The issue has been addr...